Reply to thread

Message

<blockquote data-quote="Windows_Security" data-source="post: 543625" data-attributes="member: 50782">Somewhat unusual TIP: add VoodooShield in AUTO-PILOT to these SRP basic user.Although two anti-executables (VS and SRP) seem like a redundant set up, they complement each other nicely, because<ol>
<li data-xf-list-type="ol">VS and SRP both allow already installed software to run &amp; update (so it is Set and Forget). 
 
</li>
<li data-xf-list-type="ol">VS also blocks suspicious command line executions which hardens SRP against poisened documents (e.g. SRP/AppLocker bypas through Macro execution as discovered by Didier Stevens in the past) 
 
</li>
<li data-xf-list-type="ol">SRP complements VS because blocks all unelevated executable file formats in user folders&nbsp; (VS does not block DLL&#039;s for example). 
 
</li>
<li data-xf-list-type="ol">When you knowingly bypass SRP with &quot;Run as Admin&quot;, then VS running in AUTO-PILOT mode closes any &quot;shoot in the foot&quot; errors made by the user because it:<ul>
<li data-xf-list-type="ul">Blocks all known malware using 55 engines of Virus Total</li>
<li data-xf-list-type="ul">Blocks 99% of all zero days with its own Artificial Intelligence engine</li>
</ul></li>
</ol></blockquote>

[QUOTE="Windows_Security, post: 543625, member: 50782"] Somewhat unusual TIP: add VoodooShield in AUTO-PILOT to these SRP basic user. Although two anti-executables (VS and SRP) seem like a redundant set up, they complement each other nicely, because [LIST=1] [*]VS and SRP both allow already installed software to run & update (so it is Set and Forget). [*]VS also blocks suspicious command line executions which hardens SRP against poisened documents (e.g. SRP/AppLocker bypas through Macro execution as discovered by Didier Stevens in the past) [*]SRP complements VS because blocks[I] all[/I] unelevated executable file formats in user folders (VS does not block DLL's for example). [*]When you knowingly bypass SRP with "Run as Admin", then VS running in AUTO-PILOT mode closes any "shoot in the foot" errors made by the user because it: [LIST] [*]Blocks all known malware using 55 engines of Virus Total [*]Blocks 99% of all zero days with its own Artificial Intelligence engine [/LIST] [/LIST] [/QUOTE]

Verification